$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: unenXrjan7YINz2rH61K9zzn0mfnSih7dqNQfZsj/1E= Subject key identifier: 0B:76:CC:4F:CC:3D:8B:05:71:06:52:CE:93:55:2E:4B:5B:41:D3:AA Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 357A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 356A Signing time: Tue 28 Jul 2026 14:35:33 +0000 Manifest this update: Tue 28 Jul 2026 14:35:32 +0000 Manifest next update: Tue 04 Aug 2026 14:35:32 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: NvYkPrfwdSSS12Ou+uF5myldVF4pYPY0v1BU4JXZUwc=) 2: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: MqilWzifWvqEYGq5ohMc8R4PUuURagvs92LzzjmSjnw=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 4: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13690 (0x357a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Jul 28 14:35:32 2026 GMT Not After : Aug 4 14:35:32 2026 GMT Subject: CN=6a68be35-8238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:c6:f1:48:62:5d:7a:c5:6c:0d:1b:be:31: 73:fb:3d:00:82:17:d1:27:a5:6e:6c:20:dc:08:df: 2d:67:ee:c4:35:3e:92:e3:f2:9b:9c:4f:d6:c6:91: ee:d9:3e:f5:23:d6:07:e3:16:64:97:1b:27:98:22: 2f:04:6f:34:17:dc:a5:75:d5:7a:82:3a:93:4b:9c: 81:10:30:0a:aa:87:cd:13:2a:5e:75:b0:29:e6:05: d7:2c:d2:bb:4b:4c:7e:96:86:18:9f:62:bf:20:f2: ad:22:c6:cd:bd:c2:60:e6:1d:f9:66:74:b9:84:75: 4d:31:28:3a:11:c9:d9:e6:2b:ca:29:ac:82:91:9b: db:2c:98:b4:ce:25:ee:11:b0:9c:c3:b7:53:d4:60: 63:00:77:3b:88:49:67:b5:97:bf:29:6e:05:18:2a: d4:69:20:49:79:5a:df:b1:42:ce:dc:c9:b7:28:01: 43:ed:e8:6d:a6:dc:10:91:f4:45:51:dd:6c:b4:73: 49:fd:66:6d:36:82:d5:bc:98:7c:5f:66:d5:3b:e5: 68:5d:2f:ed:b2:41:34:4f:90:f5:fb:32:26:f5:77: f1:1f:42:3e:71:66:86:9b:23:4e:dd:b5:79:ab:d3: 79:e1:e0:e6:88:2d:04:74:d0:8e:43:12:86:78:3d: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:CC:4F:CC:3D:8B:05:71:06:52:CE:93:55:2E:4B:5B:41:D3:AA X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:87:56:39:48:45:ad:b6:2a:e9:2b:df:fa:ea:14:0b:10:ab: 63:76:02:8d:67:aa:15:28:c3:f4:78:e0:cf:b7:10:c6:a3:77: 5d:3f:bf:56:77:03:c4:d4:c0:53:da:7e:9e:93:fd:29:13:c9: 79:f0:12:9c:d0:c3:e5:8b:eb:e8:09:c8:0f:1f:1d:97:bd:a4: c8:cd:e5:ef:55:1c:37:ef:5b:7a:f7:d3:8a:66:88:5a:0e:21: 60:21:ff:63:8a:9f:c2:ab:b7:8e:7a:ae:f3:69:75:8f:77:22: 94:2e:36:98:89:9d:01:19:c5:c4:4b:fc:4a:db:cd:19:8c:1a: 63:02:8b:c3:b1:bd:dc:df:9c:e0:8f:2e:b4:42:2a:ca:e6:03: 92:2b:4f:ea:e0:0f:67:3b:b9:02:f6:56:5b:bf:0a:76:63:c0: 36:67:34:a3:f4:dc:40:fb:63:4d:90:ad:0c:c6:d0:93:a3:28: 50:c6:a3:75:d3:65:59:f5:6e:09:cd:dc:28:6e:44:95:cc:c9: ed:07:b3:ca:df:31:c9:16:bb:fd:0a:c4:32:c5:2a:e8:16:76: c6:97:e5:6e:6c:ee:c6:a3:39:fd:ab:4c:53:78:f0:17:c0:6c: 63:40:f3:e9:c7:57:be:c0:5a:e1:9e:a9:cf:be:eb:ef:fc:af: bd:51:84:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYwNzI4MTQzNTMyWhcNMjYwODA0MTQzNTMyWjAYMRYwFAYD VQQDEw02YTY4YmUzNS04MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnafG8UhiXXrFbA0bvjFz+z0AghfRJ6VubCDcCN8tZ+7ENT6S4/KbnE/WxpHu 2T71I9YH4xZklxsnmCIvBG80F9ylddV6gjqTS5yBEDAKqofNEypedbAp5gXXLNK7 S0x+loYYn2K/IPKtIsbNvcJg5h35ZnS5hHVNMSg6EcnZ5ivKKayCkZvbLJi0ziXu EbCcw7dT1GBjAHc7iElntZe/KW4FGCrUaSBJeVrfsULO3Mm3KAFD7ehtptwQkfRF Ud1stHNJ/WZtNoLVvJh8X2bVO+VoXS/tskE0T5D1+zIm9XfxH0I+cWaGmyNO3bV5 q9N54eDmiC0EdNCOQxKGeD3e0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAt2zE/M PYsFcQZSzpNVLktbQdOqMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADYdWOUhFrbYq6Svf+uoUCxCrY3YCjWeqFSjD9Hjgz7cQxqN3XT+/VncDxNTA U9p+npP9KRPJefASnNDD5Yvr6AnIDx8dl72kyM3l71UcN+9bevfTimaIWg4hYCH/ Y4qfwqu3jnqu82l1j3cilC42mImdARnFxEv8StvNGYwaYwKLw7G93N+c4I8utEIq yuYDkitP6uAPZzu5AvZWW78KdmPANmc0o/TcQPtjTZCtDMbQk6MoUMajddNlWfVu Cc3cKG5ElczJ7Qezyt8xyRa7/QrEMsUq6BZ2xpflbmzuxqM5/atMU3jwF8BsY0Dz 6cdXvsBa4Z6pz77r7/yvvVGELg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:17 2026 by rpki-client